You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "James Sirota (JIRA)" <ji...@apache.org> on 2016/06/02 05:31:59 UTC
[jira] [Updated] (METRON-175) Create RFC 3164 Parser
[ https://issues.apache.org/jira/browse/METRON-175?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
James Sirota updated METRON-175:
--------------------------------
Labels: ParserExtension (was: )
> Create RFC 3164 Parser
> ----------------------
>
> Key: METRON-175
> URL: https://issues.apache.org/jira/browse/METRON-175
> Project: Metron
> Issue Type: New Feature
> Reporter: Jonathan Rider
> Priority: Minor
> Labels: ParserExtension
> Original Estimate: 24h
> Remaining Estimate: 24h
>
> Create a parser for the unix syslog format RFC 3164.
> The data we are getting in looks like:
> <14>May 20 08:57:57 abcen123 marathon[3040]: [2016-05-20 08:57:57,048] INFO Connecting to Zookeeper... (mesosphere.marathon.Main$:39)
> and the parsed data should look like:
> {
> "priority":"14",
> "timestamp": 1463749077000,
> "hostname":"abcen123.com",
> "tag":"marathon[3040]",
> "message":"[2016-05-20 08:57:57,048] INFO Connecting to Zookeeper... (mesosphere.marathon.Main$:39)",
> "original_string":"<14>May 20 08:57:57 abcen123.com marathon[3040]: [2016-05-20 08:57:57,048] INFO Connecting to Zookeeper... (mesosphere.marathon.Main$:39)"
> }
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)